News for hackers. Stuff that matters.

A comment on Attacking Unix Systems via Cups, Part I. Parent comment

Re:Attacking Unix Systems via Cups, Part I by amluto on Friday September 27, 2024 @12:05AM (#41666142)
Why on Earth do ordinary systems need CUPS binding to a port at all?
[ Parent | on HN ]
Re:Attacking Unix Systems via Cups, Part I by a96 on Friday September 27, 2024 @03:39AM (#41667402)
They don't need. Want, for listening to network printers announcing themselves. It's a very bad system, even then.
[ Parent | on HN ]
Re:Attacking Unix Systems via Cups, Part I by amluto on Friday September 27, 2024 @10:03AM (#41670631)
Have you ever seen a network printer announce itself by talking to a print daemon on port 631?

I’ve seen network printers announce themselves over DNS-SD/mDNS and over NetBIOS, AppleTalk, etc. All of those are a layer beneath the print daemon.

[ Parent | on HN ]
Re:Attacking Unix Systems via Cups, Part I by yrro on Friday September 27, 2024 @12:02PM (#41672206)
They don't. cups-browsed is a legacy component that isn't needed on ordinary systems, which outsource printer discovery to an mDNS service such as avahi.
[ Parent | on HN ]